Convert 'apt' tags from task-based to role-based